279 matches found
CVE-2018-12114
Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts...
CVE-2018-12114
Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts...
CVE-2018-12114
CVE-2018-12114 affects MacCMS 10. A CSRF vulnerability allows an attacker to add administrator user accounts via the request targeting admin.php/admin/admin/info.html. The issue is demonstrated in public references and exploit entries, including an explicit POST form example used to create a new ...
CVE-2018-12114
Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts...
MACCMS 10 - Cross-Site Request Forgery (Add User)
MACCMS 10 - Cross-Site Request Forgery Add User Exploit Title: MACCMSV10 CSRF vulnerability add admin account Date: 2018-06-11 Exploit Author: bay0net Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9168309.html Software Link: http://www.maccms.com/down.html Version: V10 CVE : CVE-2018-12114 I...
MACCMS 10 Cross Site Request Forgery
Exploit Title: MACCMSV10 CSRF vulnerability add admin account Date: 2018-06-11 Exploit Author: bay0net Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9168309.html Software Link: http://www.maccms.com/down.html Version: V10 CVE : CVE-2018-12114 I found a CSRF vulnerability in maccmsv10,this...
MACCMS 10 - Cross-Site Request Forgery (Add User)
Exploit Title: MACCMSV10 CSRF vulnerability add admin account Date: 2018-06-11 Exploit Author: bay0net Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9168309.html Software Link: http://www.maccms.com/down.html Version: V10 CVE : CVE-2018-12114 I found a CSRF vulnerability in maccmsv10,this...
MACCMS 10 - Cross-Site Request Forgery (Add User) Vulnerability
Exploit for php platform in category web applications Exploit Title: MACCMSV10 CSRF vulnerability add admin account Exploit Author: bay0net Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9168309.html Software Link: http://www.maccms.com/down.html Version: V10 CVE : CVE-2018-12114 I found a CSR...
SQL Injection Vulnerability in MacCMS Version 8.x
MacCMS program is a fast shadow video building system that runs on PHP+MYSQL environment. A frontend SQL injection vulnerability exists in MacCMS version 8.x 2017-06-20, which can be exploited by attackers to obtain sensitive database information...
Cross site request forgery (csrf)
Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...
CVE-2017-17733
Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...
CVE-2017-17733
Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...
CVE-2017-17733
Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...
CVE-2017-17733
CVE-2017-17733 affects Maccms 8.x. The vulnerability allows remote command execution via the wd parameter in an index.php?m=vod-search request. Primary impact is remote code execution with partial confidentiality/integrity/availability concerns (per NVD CVSS 2.0/3.0 data). Connected sources (Red ...
MacCMS Command Execution Vulnerability
Maccms is a cross-platform PHP and MySQL based rapid site building system. A security vulnerability exists in Maccms 8.x version. The vulnerability can be exploited by remote attackers to execute commands with the help of the 'wd' parameter in the index.php?m=vod-search request...
poc
This repository appears to be a collection of proof-of-concept PoC exploits for various vulnerabilities, primarily targeting web applications. The PoCs are written in Python and utilize the Beebeeto framework. The PoCs cover a range of vulnerabilities, including SQL injection, cross-site scriptin...
MacCMS v8 admin_interface.php SQL injection
No description provided by source...
MacCMS V8 /inc/api.php SQL注入漏洞
No description provided by source...